Overview

overview

10

Static

static

7

7859def413...18.exe

windows7-x64

10

7859def413...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7859def41379708008057f29888eb00e_JaffaCakes118

  • Size

    24KB

  • Sample

    240727-qxhsya1hnl

  • MD5

    7859def41379708008057f29888eb00e

  • SHA1

    ac10219896318eea9a51bf8cfaea8964a6f18863

  • SHA256

    62b882cae90af4029f61ca1b7f4fc32001e5ff1a23e289efe01dc557dbb32a3c

  • SHA512

    720608d1b0186e06af1be3b2d75f249443efa30cf6bbb903f1e07effe35e806f5f15cd96754ca51cdbd642485a0a7badd574f2403ee76a2708d9f6427ad3db1a

  • SSDEEP

    384:uw4jDm8g8gOViRnWJbHGlV7QEcHfGBi+P5LI0XrOZ6XXeqz/u4WybjVG8L:un/9HURLVEOBi+PFXpHeSH5

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      7859def41379708008057f29888eb00e_JaffaCakes118

    • Size

      24KB

    • MD5

      7859def41379708008057f29888eb00e

    • SHA1

      ac10219896318eea9a51bf8cfaea8964a6f18863

    • SHA256

      62b882cae90af4029f61ca1b7f4fc32001e5ff1a23e289efe01dc557dbb32a3c

    • SHA512

      720608d1b0186e06af1be3b2d75f249443efa30cf6bbb903f1e07effe35e806f5f15cd96754ca51cdbd642485a0a7badd574f2403ee76a2708d9f6427ad3db1a

    • SSDEEP

      384:uw4jDm8g8gOViRnWJbHGlV7QEcHfGBi+P5LI0XrOZ6XXeqz/u4WybjVG8L:un/9HURLVEOBi+PFXpHeSH5

    Score
    10/10
    discoveryevasionupx

    • Modifies firewall policy service

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks